Service the PA-5200 Series Firewall
Drive id Sys2 active sync
swap clean
Drive id Sys1 active sync
Drive id Sys2 active sync
STEP 10 |
Different model replacement drive only) Add the replacement drive (one that is a different
model than the failed drive) to the RAID 1 array:
1. Connect a serial cable from your computer to the Console port on the firewall and
connect to the firewall using terminal emulaon soware that is configured to use
9600-8-N-1 sengs.
2. (Oponal) Suspend the firewall with the failed drive if it is the acve firewall in an HA
configuraon.
The firewall fails over when you boot into the Maintenance Recover Tool (MRT)
as described in the following step but you can choose to
manually suspend the firewall that contains the failed drive.
3. Reboot the firewall with the failed drive into the MRT by running the following
command:
admin@PA-5020>
debug system maintenance-mode
4. Press
Enter
on
CONTINUE
and then navigate to
RAID
and press
Enter
again.
5. Navigate to the Migrate Drive secon and select the drive to migrate. In this example,
select
Migrate drive Sys2 -> Sys1
to iniate the process of copying the system
data from the Sys2 drive to the Sys1 replacement drive.
6. Aer migraon is complete, remove the other system drive. In this example, remove the
Sys2 drive.
7. Press
Esc
to go back to the main menu and then press
Enter
on
Reboot
.
8. Aer the firewall boots PAN-OS, replace the other drive in the array so the drives in the
array are the same model. In this example, first remove the Sys2 drive from the carrier
PA-5200 Series Next-Gen Firewall Hardware Reference
47
©
2021 Palo Alto Networks, Inc.
